@hiver/connector-agent 4.11.3 → 4.12.0-beta.1

package/app/connector-cards.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connector-cards.d.ts","sourceRoot":"","sources":["../../src/app/connector-cards.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAkF,MAAM,OAAO,CAAC;AAmG3G,UAAU,SAAS;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,eAAO,MAAM,cAAc,EAAE,EAAE,CAAC,SAAS,CAmmBxC,CAAC"}
+{"version":3,"file":"connector-cards.d.ts","sourceRoot":"","sources":["../../src/app/connector-cards.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAkF,MAAM,OAAO,CAAC;AAoG3G,UAAU,SAAS;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,eAAO,MAAM,cAAc,EAAE,EAAE,CAAC,SAAS,CAwmBxC,CAAC"}

package/app/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/app/provider.tsx"],"names":[],"mappings":"AAOA,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,KAAK,gBAAgB,GAAG;IACtB,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,iBAAiB,CAAC,EAAE,aAAa,CAAC;IAClC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,KAAK,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,eAAO,MAAM,WAAW,oKAYrB,gBAAgB,4CA2BlB,CAAC"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../../src/app/provider.tsx"],"names":[],"mappings":"AAQA,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,KAAK,gBAAgB,GAAG;IACtB,QAAQ,EAAE,KAAK,CAAC,SAAS,CAAC;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,YAAY,CAAC;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,SAAS,CAAC;IACrB,iBAAiB,CAAC,EAAE,aAAa,CAAC;IAClC,kBAAkB,EAAE,kBAAkB,CAAC;IACvC,eAAe,EAAE,eAAe,CAAC;IACjC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,KAAK,CAAC,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF,eAAO,MAAM,WAAW,oKAYrB,gBAAgB,4CAqClB,CAAC"}

package/features/connector-cards/api/userAuth.d.ts

@@ -0,0 +1,25 @@
+import { UserAuthState } from '../store/userAuth';
+export interface UserAuthStatusResponse {
+    state: UserAuthState;
+    reason?: string;
+    external_user_id?: string;
+}
+export interface UserAuthStartResponse {
+    auth_url: string;
+    tier: 'user';
+}
+/**
+ * Reads the signed-in agent's user-tier connection state for a
+ * connector. Called on card mount when `connector.userAuthEnabled`
+ * is true; not called for legacy connectors so legacy mount paths
+ * stay byte-for-byte unchanged.
+ */
+export declare const getUserAuthStatus: (connectorId: string) => Promise<import('axios').AxiosResponse<any, any> | undefined>;
+/**
+ * Builds the OAuth authorization URL the agent visits in a popup to
+ * connect their personal account. The BE encodes `state.tier=user`
+ * + `state.user_id` so the callback knows to land in
+ * /process_user_callback rather than the workspace flow.
+ */
+export declare const startUserAuth: (connectorId: string) => Promise<import('axios').AxiosResponse<any, any> | undefined>;
+//# sourceMappingURL=userAuth.d.ts.map

package/features/connector-cards/api/userAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userAuth.d.ts","sourceRoot":"","sources":["../../../../src/features/connector-cards/api/userAuth.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAE/E,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,gBAAiB,MAAM,iEAKpD,CAAC;AAEF;;;;;GAKG;AACH,eAAO,MAAM,aAAa,gBAAiB,MAAM,iEAKhD,CAAC"}

package/features/connector-cards/components/card-list/CardWithUserAuth.d.ts

@@ -0,0 +1,32 @@
+import { FC } from 'react';
+import { ICard, ISpecificCard } from '../../../../types/cards';
+import { ApiStatus } from '../../../../types/api';
+interface IProps {
+    card: ICard;
+    email: string;
+    specificCardData: Record<string, ISpecificCard> | null;
+    specificConnectorApiStatus: Record<string, ApiStatus> | null;
+    defaultOpenState: boolean;
+    onCardUnlinking: () => void;
+}
+/**
+ * Wraps the regular Card render with the user-tier auth gate.
+ *
+ * - When the install has not opted into user-tier auth
+ *   (`card.userAuthEnabled !== true`) → renders the regular Card.
+ *   Zero behavior change for legacy connectors.
+ *
+ * - When opted in:
+ *     * On mount, fetches /user-auth/status once via tanstack-query
+ *       (30s staleTime → batches across cards sharing the connector).
+ *     * If the resolved state is `connected` (or `unknown` while the
+ *       fetch is in-flight) → renders the regular Card.
+ *     * Otherwise renders <UserAuthCard /> with the right variant.
+ *
+ *   The `onConnected` callback invalidates the card data query so
+ *   the regular Card mounts immediately after the popup completes,
+ *   without forcing the user to refresh or remount.
+ */
+export declare const CardWithUserAuth: FC<IProps>;
+export {};
+//# sourceMappingURL=CardWithUserAuth.d.ts.map

package/features/connector-cards/components/card-list/CardWithUserAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CardWithUserAuth.d.ts","sourceRoot":"","sources":["../../../../../src/features/connector-cards/components/card-list/CardWithUserAuth.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC;AAS3B,OAAO,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC1D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAE7C,UAAU,MAAM;IACd,IAAI,EAAE,KAAK,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,GAAG,IAAI,CAAC;IACvD,0BAA0B,EAAE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,IAAI,CAAC;IAC7D,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,MAAM,IAAI,CAAC;CAC7B;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,gBAAgB,EAAE,EAAE,CAAC,MAAM,CAiEvC,CAAC"}

package/features/connector-cards/components/connection-in-progress-modal/index.d.ts

@@ -0,0 +1,19 @@
+import { FC } from 'react';
+/**
+ * Renders Figma frame 2 — the centered "Connection in progress"
+ * overlay shown while a user-tier OAuth popup is open.
+ *
+ * Mounted once at the app/connector-cards.tsx level rather than
+ * per-card. The slice's selectAnyInProgressConnectorId selector
+ * naturally dedupes across concurrent connect attempts (which
+ * shouldn't happen — the bifrost interceptor only kicks in for
+ * one connector at a time — but the design is defensive).
+ *
+ * Per the spec the modal has no close button. The user must
+ * complete the OAuth flow (or close the popup themselves, at
+ * which point the 5-min in-progress timeout in useUserAuthFlow
+ * fires and the modal disappears with the state transition).
+ */
+declare const ConnectionInProgressModal: FC;
+export default ConnectionInProgressModal;
+//# sourceMappingURL=index.d.ts.map

package/features/connector-cards/components/connection-in-progress-modal/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/features/connector-cards/components/connection-in-progress-modal/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAW,MAAM,OAAO,CAAC;AAiBpC;;;;;;;;;;;;;;GAcG;AACH,QAAA,MAAM,yBAAyB,EAAE,EA0DhC,CAAC;AAEF,eAAe,yBAAyB,CAAC"}

package/features/connector-cards/components/user-auth-card/__tests__/UserAuthCard.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=UserAuthCard.test.d.ts.map

package/features/connector-cards/components/user-auth-card/__tests__/UserAuthCard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"UserAuthCard.test.d.ts","sourceRoot":"","sources":["../../../../../../src/features/connector-cards/components/user-auth-card/__tests__/UserAuthCard.test.tsx"],"names":[],"mappings":""}

package/features/connector-cards/components/user-auth-card/index.d.ts

@@ -0,0 +1,33 @@
+import { FC } from 'react';
+import { UserAuthState } from '../../store/userAuth';
+interface UserAuthCardProps {
+    connectorId: string;
+    connectorName: string;
+    connectorLogo: string;
+    variant: UserAuthState;
+    /** Optional reason from the backend (e.g. `workspace_mismatch`,
+     *  `site_access_denied`, `refresh_failed`). Used to pick
+     *  variant-specific copy below. */
+    reason?: string;
+    /** Called once the connect popup flow lands at `connected`.
+     *  Typically retries the original API call that surfaced the
+     *  412. Pass-through to useUserAuthFlow. */
+    onConnected?: () => void;
+}
+/**
+ * Renders Figma frames 1 and 4 (and their variants). Same component
+ * for both — the only difference is the badge + copy.
+ *
+ * - `disconnected` / `unknown` → frame 1: "Sign in to use X"
+ * - `reauth_required`          → frame 4: "Authentication failed"
+ * - `workspace_mismatch`       → frame 4 with workspace-specific copy
+ * - `in_progress`              → button disabled + spinner; the
+ *   centered modal owns the user's attention but the card body
+ *   stays mounted so layout doesn't shift when the modal closes.
+ * - `connected`                → this component shouldn't render
+ *   when state === connected; the parent routes to the normal card.
+ *   Defensive fall-through renders nothing.
+ */
+declare const UserAuthCard: FC<UserAuthCardProps>;
+export default UserAuthCard;
+//# sourceMappingURL=index.d.ts.map

package/features/connector-cards/components/user-auth-card/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/features/connector-cards/components/user-auth-card/index.tsx"],"names":[],"mappings":"AAAA,OAAO,EAAE,EAAE,EAAe,MAAM,OAAO,CAAC;AAKxC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAiB/E,UAAU,iBAAiB;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,OAAO,EAAE,aAAa,CAAC;IACvB;;uCAEmC;IACnC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;gDAE4C;IAC5C,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;CAC1B;AAED;;;;;;;;;;;;;GAaG;AACH,QAAA,MAAM,YAAY,EAAE,EAAE,CAAC,iBAAiB,CAiGvC,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/features/connector-cards/components/user-auth-card/style.d.ts

@@ -0,0 +1,29 @@
+import { HTMLAttributes, ImgHTMLAttributes } from 'react';
+import { StackProps, BoxProps, ButtonProps } from '@hiver/hiver-ui-kit';
+import { StyledComponent } from '@emotion/styled';
+/**
+ * Outer card — pale purple wash matching the no-connectors empty
+ * state. Two visually-distinct sections inside: the logo block on
+ * top, the title/body/CTA below. No outer border — the pale
+ * background carries enough separation from the page.
+ */
+export declare const CardWrapper: StyledComponent<BoxProps>;
+/**
+ * The two-logo block sits in its own slightly-inset panel at the
+ * top of the card, matching the Figma's two-section composition.
+ */
+export declare const LogoPanel: StyledComponent<BoxProps>;
+export declare const LogoRow: StyledComponent<StackProps>;
+export declare const LogoImage: StyledComponent<ImgHTMLAttributes<HTMLImageElement>>;
+/**
+ * Red exclamation badge overlaid on the app logo for the
+ * reauth_required / workspace_mismatch variants.
+ */
+export declare const ErrorBadge: StyledComponent<HTMLAttributes<HTMLSpanElement>>;
+/**
+ * Bold indigo CTA matching Figma. theme.palette.purple.primary is
+ * the same token the no-connectors card uses for its accent border
+ * and text, so the button locks into the existing design system.
+ */
+export declare const AuthenticateButton: StyledComponent<ButtonProps>;
+//# sourceMappingURL=style.d.ts.map

package/features/connector-cards/components/user-auth-card/style.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"style.d.ts","sourceRoot":"","sources":["../../../../../src/features/connector-cards/components/user-auth-card/style.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAC/D,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,eAAe,CAAC,QAAQ,CAQjD,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,SAAS,EAAE,eAAe,CAAC,QAAQ,CAO/C,CAAC;AAEF,eAAO,MAAM,OAAO,EAAE,eAAe,CAAC,UAAU,CAM/C,CAAC;AAEF,eAAO,MAAM,SAAS,EAAE,eAAe,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,CAK1E,CAAC;AAEF;;;GAGG;AACH,eAAO,MAAM,UAAU,EAAE,eAAe,CAAC,cAAc,CAAC,eAAe,CAAC,CAevE,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,eAAe,CAAC,WAAW,CAiB3D,CAAC"}

package/features/connector-cards/constants/api.d.ts

@@ -1,4 +1,6 @@
 export declare const BASE_URL = "/v1/api";
 export declare const FETCH_ALL_CARDS_API: string;
 export declare const FETCH_SPECIFIC_CARD_API: string;
+export declare const USER_AUTH_STATUS_API: string;
+export declare const USER_AUTH_START_API: string;
 //# sourceMappingURL=api.d.ts.map

package/features/connector-cards/constants/api.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../../src/features/connector-cards/constants/api.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,QAAQ,YAAY,CAAC;AAClC,eAAO,MAAM,mBAAmB,EAAE,MAAuC,CAAC;AAC1E,eAAO,MAAM,uBAAuB,EAAE,MAAgD,CAAC"}
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../../src/features/connector-cards/constants/api.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,QAAQ,YAAY,CAAC;AAClC,eAAO,MAAM,mBAAmB,EAAE,MAAuC,CAAC;AAC1E,eAAO,MAAM,uBAAuB,EAAE,MAAgD,CAAC;AAIvF,eAAO,MAAM,oBAAoB,EAAE,MAA+D,CAAC;AACnG,eAAO,MAAM,mBAAmB,EAAE,MAA8D,CAAC"}

package/features/connector-cards/hooks/useUserAuthFlow.d.ts

@@ -0,0 +1,42 @@
+import { UserAuthEntry, UserAuthState } from '../store/userAuth';
+interface UseUserAuthFlowOptions {
+    /**
+     * Called when the polling loop transitions to `connected`.
+     * Typically used to retry the original failed API call.
+     */
+    onConnected?: () => void;
+}
+interface UseUserAuthFlowReturn {
+    entry: UserAuthEntry;
+    state: UserAuthState;
+    connect: () => Promise<void>;
+    isStarting: boolean;
+}
+/**
+ * Orchestrates a user-tier connect flow:
+ *   1. `connect()` calls POST /user-auth/start and opens the
+ *      authorization URL in a popup.
+ *   2. Marks the connector in_progress in redux.
+ *   3. Polls GET /user-auth/status every 2s via tanstack-query;
+ *      stops polling on a terminal state.
+ *   4. On `connected`, calls onConnected so the caller can retry
+ *      the original failed API call without forcing a remount.
+ *
+ * Polling cadence + tanstack-query usage mirrors the admin app's
+ * authSuccessQuery — same pattern, scoped per-connector here.
+ */
+export declare function useUserAuthFlow(connectorId: string, options?: UseUserAuthFlowOptions): UseUserAuthFlowReturn;
+/**
+ * One-shot fetcher used at card-mount time. Doesn't poll — drops
+ * the result into the slice and exits. The polling-on-in_progress
+ * behavior is handled separately by useUserAuthFlow above.
+ */
+export declare function useFetchUserAuthStatus(connectorId: string, enabled: boolean): void;
+/**
+ * Exposed for tests + the rare "user clicked Disconnect from the
+ * customer-identity-mapping menu" path — wipes the slice entry so
+ * the next card mount triggers a fresh status fetch.
+ */
+export declare function useResetUserAuth(): (connectorId: string) => void;
+export {};
+//# sourceMappingURL=useUserAuthFlow.d.ts.map

package/features/connector-cards/hooks/useUserAuthFlow.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useUserAuthFlow.d.ts","sourceRoot":"","sources":["../../../../src/features/connector-cards/hooks/useUserAuthFlow.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,2CAA2C,CAAC;AAkB9F,UAAU,sBAAsB;IAC9B;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,IAAI,CAAC;CAC1B;AAED,UAAU,qBAAqB;IAC7B,KAAK,EAAE,aAAa,CAAC;IACrB,KAAK,EAAE,aAAa,CAAC;IACrB,OAAO,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7B,UAAU,EAAE,OAAO,CAAC;CACrB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,eAAe,CAC7B,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,sBAA2B,GACnC,qBAAqB,CAmJvB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,QAqB3E;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,kBAEG,MAAM,UAGxC"}

package/features/connector-cards/store/userAuth.d.ts

@@ -0,0 +1,85 @@
+import { PayloadAction } from '@reduxjs/toolkit';
+import { RootState } from '../../../store';
+/**
+ * Per-connector user-tier authentication state.
+ *
+ * The resolver on the backend reads three gates: an LD flag,
+ * `connector.user_auth_enabled`, and the API's `auth_tier`. When all
+ * three open the flow lands at `user_connectors` lookup. This slice
+ * mirrors that lookup's result on the client so the right-panel can
+ * render the appropriate state without re-hitting the BE on every
+ * card mount.
+ */
+export type UserAuthState = 'unknown' | 'disconnected' | 'in_progress' | 'connected' | 'reauth_required' | 'workspace_mismatch';
+export interface UserAuthEntry {
+    state: UserAuthState;
+    reason?: string;
+    externalUserId?: string;
+    connectUrl?: string;
+    lastChecked?: number;
+}
+export interface UserAuthSlice {
+    byConnectorId: {
+        [connectorId: string]: UserAuthEntry;
+    };
+}
+interface StatusReceivedPayload {
+    connectorId: string;
+    state: UserAuthState;
+    reason?: string;
+    externalUserId?: string;
+}
+interface AuthRequiredPayload {
+    connectorId: string;
+    connectUrl: string;
+    reason?: string;
+}
+interface InProgressPayload {
+    connectorId: string;
+}
+interface CompletedPayload {
+    connectorId: string;
+    externalUserId?: string;
+}
+interface FailedPayload {
+    connectorId: string;
+    reason: string;
+}
+interface ResetPayload {
+    connectorId: string;
+}
+export declare const userAuthSlice: import('@reduxjs/toolkit').Slice<UserAuthSlice, {
+    /**
+     * Result of GET /user-auth/status — full picture from the server.
+     * Replaces any local in-progress state too: if a poll comes back
+     * with `connected` while we thought we were `in_progress`, we
+     * adopt the server's view.
+     */
+    userAuthStatusReceived(state: import('immer').WritableDraft<UserAuthSlice>, action: PayloadAction<StatusReceivedPayload>): void;
+    /**
+     * Fired from the bifrost 412 interceptor. Carries the connect URL
+     * so the UI can launch the popup without a separate
+     * /user-auth/start round-trip when the user opts to connect.
+     * Multiple concurrent 412s for the same connector are naturally
+     * deduped because we key on connectorId.
+     */
+    userAuthRequired(state: import('immer').WritableDraft<UserAuthSlice>, action: PayloadAction<AuthRequiredPayload>): void;
+    userAuthInProgress(state: import('immer').WritableDraft<UserAuthSlice>, action: PayloadAction<InProgressPayload>): void;
+    userAuthCompleted(state: import('immer').WritableDraft<UserAuthSlice>, action: PayloadAction<CompletedPayload>): void;
+    userAuthFailed(state: import('immer').WritableDraft<UserAuthSlice>, action: PayloadAction<FailedPayload>): void;
+    userAuthReset(state: import('immer').WritableDraft<UserAuthSlice>, action: PayloadAction<ResetPayload>): void;
+}, "userAuth", "userAuth", import('@reduxjs/toolkit').SliceSelectors<UserAuthSlice>>;
+export declare const userAuthStatusReceived: import('@reduxjs/toolkit').ActionCreatorWithPayload<StatusReceivedPayload, "userAuth/userAuthStatusReceived">, userAuthRequired: import('@reduxjs/toolkit').ActionCreatorWithPayload<AuthRequiredPayload, "userAuth/userAuthRequired">, userAuthInProgress: import('@reduxjs/toolkit').ActionCreatorWithPayload<InProgressPayload, "userAuth/userAuthInProgress">, userAuthCompleted: import('@reduxjs/toolkit').ActionCreatorWithPayload<CompletedPayload, "userAuth/userAuthCompleted">, userAuthFailed: import('@reduxjs/toolkit').ActionCreatorWithPayload<FailedPayload, "userAuth/userAuthFailed">, userAuthReset: import('@reduxjs/toolkit').ActionCreatorWithPayload<ResetPayload, "userAuth/userAuthReset">;
+declare const _default: import('redux').Reducer<UserAuthSlice>;
+export default _default;
+export declare const selectUserAuthEntry: (state: RootState, connectorId: string) => UserAuthEntry;
+export declare const selectUserAuthState: (state: RootState, connectorId: string) => UserAuthState;
+export declare const selectIsUserConnected: (state: RootState, connectorId: string) => boolean;
+export declare const selectConnectUrl: (state: RootState, connectorId: string) => string | undefined;
+/**
+ * Any connector currently in the in_progress state. The modal mounts
+ * once at the app level rather than per-card; this selector tells it
+ * whether to render.
+ */
+export declare const selectAnyInProgressConnectorId: (state: RootState) => string | undefined;
+//# sourceMappingURL=userAuth.d.ts.map

package/features/connector-cards/store/userAuth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userAuth.d.ts","sourceRoot":"","sources":["../../../../src/features/connector-cards/store/userAuth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAe,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEzC;;;;;;;;;GASG;AAEH,MAAM,MAAM,aAAa,GACrB,SAAS,GACT,cAAc,GACd,aAAa,GACb,WAAW,GACX,iBAAiB,GACjB,oBAAoB,CAAC;AAEzB,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,aAAa,EAAE;QAAE,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAAA;KAAE,CAAC;CACzD;AAMD,UAAU,qBAAqB;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,aAAa,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,mBAAmB;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,UAAU,iBAAiB;IACzB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,UAAU,gBAAgB;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,UAAU,aAAa;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,UAAU,YAAY;IACpB,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,eAAO,MAAM,aAAa;IAItB;;;;;OAKG;wFACmC,aAAa,CAAC,qBAAqB,CAAC;IAW1E;;;;;;OAMG;kFAC6B,aAAa,CAAC,mBAAmB,CAAC;oFAiBhC,aAAa,CAAC,iBAAiB,CAAC;mFAUjC,aAAa,CAAC,gBAAgB,CAAC;gFASlC,aAAa,CAAC,aAAa,CAAC;+EAW7B,aAAa,CAAC,YAAY,CAAC;oFAI1D,CAAC;AAEH,eAAO,MACL,sBAAsB,iHACtB,gBAAgB,yGAChB,kBAAkB,yGAClB,iBAAiB,uGACjB,cAAc,iGACd,aAAa,6FACU,CAAC;;AAE1B,wBAAqC;AAMrC,eAAO,MAAM,mBAAmB,UAAW,SAAS,eAAe,MAAM,KAAG,aACxB,CAAC;AAErD,eAAO,MAAM,mBAAmB,UAAW,SAAS,eAAe,MAAM,KAAG,aAC7B,CAAC;AAEhD,eAAO,MAAM,qBAAqB,UAAW,SAAS,eAAe,MAAM,KAAG,OACf,CAAC;AAEhE,eAAO,MAAM,gBAAgB,UAAW,SAAS,eAAe,MAAM,KAAG,MAAM,GAAG,SAC9B,CAAC;AAErD;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,UAAW,SAAS,KAAG,MAAM,GAAG,SAK1E,CAAC"}

package/features/connector-cards/store/userAuth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=userAuth.test.d.ts.map

package/features/connector-cards/store/userAuth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"userAuth.test.d.ts","sourceRoot":"","sources":["../../../../src/features/connector-cards/store/userAuth.test.ts"],"names":[],"mappings":""}

package/features/connector-cards/utils/registerUserAuthCallback.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Wires the bifrost transport's 412 USER_AUTH_REQUIRED hook to the
+ * agent app's redux store. Bifrost is host-agnostic by design — it
+ * holds a callback reference rather than importing redux directly,
+ * so we attach the dispatcher here on the agent side.
+ *
+ * Idempotent: hosts that initialize the agent multiple times in
+ * one page session (rare but possible in single-page consumers)
+ * won't double-fire the dispatch because the callback assignment
+ * just overwrites the previous reference.
+ */
+export declare const registerUserAuthCallback: () => void;
+//# sourceMappingURL=registerUserAuthCallback.d.ts.map

package/features/connector-cards/utils/registerUserAuthCallback.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registerUserAuthCallback.d.ts","sourceRoot":"","sources":["../../../../src/features/connector-cards/utils/registerUserAuthCallback.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,wBAAwB,QAAO,IAsB3C,CAAC"}